CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596: Out-of-bounds Write

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

form action=http:...

RealTime RWR-3G-100 Router Cross Site Request Forgery

...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

RealTime RWR-3G-100 Router - Cross-Site Request Forgery Change Admin Password !-- CHANGE...

Netgear FM114P Wireless Firewall File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6807/info Netgear FM114P Wireless Firewalls allow directory traversal using escaped character sequences. It is possible for an unauthenticated user to retrieve the firewall's configuration file by escaping from the...

Nmap NSE net: upnp-info

Attempts to extract system information from the UPnP service. SYNTAX: upnp-info.override: Controls whether we override the IP address information returned by the UPNP service for the location of the XML file that describes the device. Defaults to true for unicast hosts. OpenVAS Vulnerability Test...

Ubuntu 7.10 / 8.04 LTS : pidgin vulnerabilities (USN-675-1)

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...

Ubuntu: Security Advisory (USN-675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for pidgin vulnerabilities USN-675-1

Ubuntu Update for Linux kernel vulnerabilities USN-675-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6751.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pidgin vulnerabilities USN-675-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

USN-675-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

Stack overflow

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

The CVE-2007-1204 issue affects Microsoft Windows XP SP2 with the UPnP service. It is a stack-based buffer overflow triggered by specially crafted HTTP headers in UPnP requests/notifications, allowing a remote attacker on the same subnet to execute arbitrary code in the context of the vulnerable ...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

[Full-disclosure] Flaw in AVM UPNP service for windows

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

UPnP TCP Helper Detection

The remote host is running Microsoft UPnP TCP helper. If the tested network is not a home network, you should disable this service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11765; scriptversion"1.19"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"UPnP TCP...

Advisory CA-2001-37 Buffer Overflow in UPnP Service On Microsoft Windows

CERT Advisory CA-2001-37 Buffer Overflow in UPnP Service On Microsoft Windows Original release date: December 20, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Microsoft Windows XP Microsoft Windows ME Microsoft Windows 98...